This vulnerability (CVE-2025-22769) in Creative Brahma Multifox is a stored cross-site scripting (CWE-79) issue caused by improper input sanitization during web page generation. It affects Multifox versions up to 1.3.7. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with a scope change and low impact on confidentiality, integrity, and availability. No patch or official remediation level has been published yet.

Successful exploitation could allow an attacker with some privileges to inject and store malicious scripts that execute in other users' browsers, potentially leading to information disclosure, session hijacking, or other client-side impacts. The overall impact is rated medium based on the CVSS score and described effects.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted input and consider applying any available workarounds or mitigations recommended by the vendor once published.